@reecemarkowsky roll, but nothing dangerous, just the client's token and parameter concatenation bits. needed to control nonce and timestamp to unit test